ExamGecko
Login
Home / Microsoft / AZ-500 / List of questions
Ask Question

Microsoft AZ-500 Practice Test - Questions Answers, Page 5

Add to Whishlist

List of questions

Question 41

Report Export Collapse

DRAG DROP

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Subscription named Sub1. Sub1 contains an Azure virtual machine named VM1 that runs Windows Server 2016.

You need to encrypt VM1 disks by using Azure Disk Encryption.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Microsoft AZ-500 image Question 41 87479 10022024015441000
Correct answer: Microsoft AZ-500 image answer Question 41 87479 10022024015441000
Explanation:

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks

asked 02/10/2024
Maurice Melgert
49 questions

Question 42

Report Export Collapse

You have an Azure subscription that contains a virtual machine named VM1.

You create an Azure key vault that has the following configurations:

Name: Vault5

Region: West US

Resource group: RG1

You need to use Vault5 to enable Azure Disk Encryption on VM1. The solution must support backing up VM1 by using Azure Backup.

Which key vault settings should you configure?

Access policies
Access policies
Secrets
Secrets
Keys
Keys
Locks
Locks
Suggested answer: A
Explanation:

References:

https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault

asked 02/10/2024
Loris Pastro
45 questions

Question 43

Report Export Collapse

You have an Azure subscription named Sub1 that contains the resources shown in the following table.

Microsoft AZ-500 image Question 16 87481 10022024015441000000

You need to ensure that you can provide VM1 with secure access to a database on SQL1 by using a contained database user.

What should you do?

Enable a managed service identity on VM1.
Enable a managed service identity on VM1.
Create a secret in KV1.
Create a secret in KV1.
Configure a service endpoint on SQL1.
Configure a service endpoint on SQL1.
Create a key in KV1.
Create a key in KV1.
Suggested answer: B
Explanation:

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure- resources/tutorial-windows-vm-access-sql


asked 02/10/2024
Shivanth Jha
43 questions

Question 44

Report Export Collapse

You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table:

Microsoft AZ-500 image Question 17 87482 10022024015441000000

In Sub1, you create a virtual machine that has the following configurations:

Name: VM1

Size: DS2v2

Resource group: RG1

Region: West Europe

Operating system: Windows Server 2016

You plan to enable Azure Disk Encryption on VM1.

In which key vaults can you store the encryption key for VM1?

Vault1 or Vault3 only
Vault1 or Vault3 only
Vault1, Vault2, Vault3, or Vault4
Vault1, Vault2, Vault3, or Vault4
Vault1 only
Vault1 only
Vault1 or Vault2 only
Vault1 or Vault2 only
Suggested answer: C
Explanation:


asked 02/10/2024
Sergio Guerra
49 questions

Question 45

Report Export Collapse

HOTSPOT

You have an Azure subscription that contains an Azure key vault named Vault1.

On January 1, 2019, Vault1 stores the following secrets.

Microsoft AZ-500 image Question 18 87483 10022024015441000000

When can each secret be used by an application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 45 87483 10022024015441000
Correct answer: Microsoft AZ-500 image answer Question 45 87483 10022024015441000
Explanation:

Box 1: Never

Password1 is disabled.

Box 2: Only between March 1, 2019 and May 1,

Password2:

Microsoft AZ-500 image Question 18 explanation 87483 10022024015441000000

Reference:

https://docs.microsoft.com/en-us/powershell/module/azurerm.keyvault/set-azurekeyvaultsecretattribute

asked 02/10/2024
Claudia Arrais
58 questions

Question 46

Report Export Collapse

You have an Azure web app named webapp1.

You need to configure continuous deployment for webapp1 by using an Azure Repo.

What should you create first?

an Azure Application Insights service
an Azure Application Insights service
an Azure DevOps organizations
an Azure DevOps organizations
an Azure Storage account
an Azure Storage account
an Azure DevTest Labs lab
an Azure DevTest Labs lab
Suggested answer: B
Explanation:

To use Azure Repos, make sure your Azure DevOps organization is linked to your Azure subscription.

Reference:

https://docs.microsoft.com/en-us/azure/app-service/deploy-continuous-deployment

asked 02/10/2024
Steven Henkel
44 questions

Question 47

Report Export Collapse

HOTSPOT

You have an Azure subscription that contains the resources shown in the following table.

Microsoft AZ-500 image Question 20 87485 10022024015441000000

User1 is a member of Group1. Group1 and User2 are assigned the Key Vault Contributor role for Vault1.

On January 1, 2019, you create a secret in Vault1. The secret is configured as shown in the exhibit. (Click the Exhibit tab.)

Microsoft AZ-500 image Question 20 87485 10022024015441000000

User2 is assigned an access policy to Vault1. The policy has the following configurations:

Key Management Operations: Get, List, and Restore

Cryptographic Operations: Decrypt and Unwrap Key

Secret Management Operations: Get, List, and Restore

Group1 is assigned an access policy to Vault1. The policy has the following configurations:

Key Management Operations: Get and Recover

Secret Management Operations: List, Backup, and Recover

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 47 87485 10022024015441000
Correct answer: Microsoft AZ-500 image answer Question 47 87485 10022024015441000
asked 02/10/2024
Jhon Doe
41 questions

Question 48

Report Export Collapse

HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso1812.onmicrosoft.com that contains the users shown in the following table.

Microsoft AZ-500 image Question 21 87486 10022024015441000000

You create an Azure Information Protection label named Label1. The Protection settings for Label1 are configured as shown in the exhibit. (Click the Exhibit tab.)

Microsoft AZ-500 image Question 21 87486 10022024015441000000

Label1 is applied to a file named File1.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 48 87486 10022024015441000
Correct answer: Microsoft AZ-500 image answer Question 48 87486 10022024015441000
asked 02/10/2024
Veronica Puddu
58 questions

Question 49

Report Export Collapse

SIMULATION

You need to prevent HTTP connections to the rg1lod10598168n1 Azure Storage account.

To complete this task, sign in to the Azure portal.

Suggested answer: A
Explanation:

Answer: A

Explanation:

The "Secure transfer required" feature is now supported in Azure Storage account. This feature enhances the security of your storage account by enforcing all requests to your account through a secure connection. This feature is disabled by default.

1. In Azure Portal select you Azure Storage account rg1lod10598168n1.

2. Select Configuration, and Secure Transfer required.

Microsoft AZ-500 image Question 22 explanation 87487 10022024015441000000

Reference:

https://techcommunity.microsoft.com/t5/Azure/quot-Secure-transfer-required-quot-is-available-in-Azure-Storage/m-p/82475

asked 02/10/2024
Christopher Harden
56 questions

Question 50

Report Export Collapse

SIMULATION

You need to ensure that the rg1lod10598168n1 Azure Storage account is encrypted by using a key stored in the KeyVault10598168 Azure key vault.

To complete this task, sign in to the Azure portal.

Suggested answer: A
Explanation:

Answer: A

Explanation:

Step 1: To enable customer-managed keys in the Azure portal, follow these steps:

1. Navigate to your storage account rg1lod10598168n1

2. On the Settings blade for the storage account, click Encryption. Select the Use your own key option, as shown in the following figure.

Microsoft AZ-500 image Question 23 explanation 87488 10022024015441000000

Step 2: Specify a key from a key vault

To specify a key from a key vault, first make sure that you have a key vault that contains a key. To specify a key from a key vault, follow these steps:

4. Choose the Select from Key Vault option.

5. Choose the key vault KeyVault10598168 containing the key you want to use.

6. Choose the key from the key vault.

Microsoft AZ-500 image Question 23 explanation 87488 10022024015441000000

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-encryption-keys-portal

asked 02/10/2024
Fadi Iraqi
42 questions
Total 442 questions
Go to page: of 45
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Subscription. The subscription contains 50 virtual machines that run Windows Server 2012 R2 or Windows Server 2016. You need to deploy Microsoft Antimalware to the virtual machines. Solution: You add an extension to each virtual machine. Does this meet the goal?
Simulation LAB Task 1 You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources.
You have Azure Resource Manager templates that you use to deploy Azure virtual machines. You need to disable unused Windows features automatically as instances of the virtual machines are provisioned. What should you use?
You are configuring and securing a network environment. You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic. You need to ensure that all network traffic is routed through VM1. What should you configure?
HOTSPOT You have an Azure subscription that contains the resources shown in the following table. Transparent Data Encryption (TDE) is disabled on SQL1. You assign policies to the resource groups as shown in the following table. You plan to deploy Azure SQL databases by using an Azure Resource Manager (ARM) template. The databases will be configured as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
You have an Azure subscription that contains the Azure virtual machines shown in the following table. You create an MDM Security Baseline profile named Profile1. You need to identify to which virtual machines Profile1 can be applied. Which virtual machines should you identify?
HOTSPOT You have Azure virtual machines that have Update Management enabled. The virtual machines are configured as shown in the following table. You schedule two update deployments named Update1 and Update2. Update1 updates VM3. Update2 updates VM6. Which additional virtual machines can be updated by using Update1 and Update2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing. You need to implement application routing that will provide reverse proxy and TLS termination for AKS services by using a single IP address. What should you do?
HOTSPOT You have an Azure key vault. You need to delegate administrative access to the key vault to meet the following requirements: Provide a user named User1 with the ability to set advanced access policies for the key vault. Provide a user named User2 with the ability to add and delete certificates in the key vault. Use the principle of least privilege. What should you use to assign access to each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
HOTSPOT You have an Azure subscription that contains the following resources: An Azure key vault An Azure SQL database named Database1 Two Azure App Service web apps named AppSrv1 and AppSrv2 that are configured to use system-assigned managed identities and access Database1 You need to implement an encryption solution for Database1 that meets the following requirements: The data in a column named Discount in Database1 must be encrypted so that only AppSrv1 can decrypt the data. AppSrv1 and AppSrv2 must be authorized by using managed identities to obtain cryptographic keys. How should you configure the encryption settings for Database1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.